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The last decade was a wake-up call for the financial sector with many explorations made into the use of distrib- 
uted ledger technology (DLT) for payments and settlements.! DLT has triggered a wave of innovations, exper- 
iments, research, and analysis of policy issues. Many lessons can be drawn from these projects to help inform 
policymakers and the industry on DLT’s potential benefits and risks, which could have implications on interna- 
tional standards for financial infrastructures to ensure safety and efficiency in the public's interest. 

So far, experiments with DLT point to the potential for financial infrastructures to move toward real-time set- 
tlement, flatter structures, continuous operations, and global reach. Testing in large-value payments and securities 
settlement systems has partly demonstrated the technical feasibility of DLT for this new environment. The projects 
analyzed issues associated with operational capacity, resiliency, liquidity savings, settlement finality, and privacy. 
DLT-based solutions can also facilitate delivery versus payment of securities, payment versus payment of foreign 
exchange transactions, and efficient cross-border payments. 

The analysis points to key issues that could require further attention. Most experiments have been completed 
under controlled and technology-focused environments. All reviewed projects concluded that DLT is, at least to 
some extent, feasible as the basis for a large-value payment system (LVPS) infrastructure, but there were some views 
warning against this technology's immaturity and lack of interoperability. Very few projects have explicitly and 
rigorously assessed risks against international standards for large-value payments and securities settlement systems. 
Almost none of the projects involved a cost-benefit analysis, and no conclusions could be reached on whether 
DLT-based or improved legacy systems could be the more efficient alternative in the future. Liquidity, credit, trans- 
action delay, settlement finality, counterparty, and operational risks could also change in varying degrees in a new 
environment. 

Key issues include major changes to the current payments, clearing, and settlements arrangements, which could 
have a strong impact on users, participants, and markets. The evolution toward new infrastructures would require 
stakeholder consultations, a review of system rules, market conventions, transaction reconciliation practices for 
synchronized distributed ledgers, and an analysis of the impact on continuous operations (based on 24/7/365). 
Second, further work would benefit from a more explicit and rigorous analysis of potential risks against the inter- 
national standards for financial market infrastructures and against the analytical framework for DLT introduction 
in payment, clearing, and settlement. Further, international standards may warrant new interpretations with respect 
to the evolving new types of risks. Third, investment and operational costs would need to be determined and 
included in a transparent cost-recovery pricing policy as part of any cost-benefit analysis before actual implementa- 
tion. And fourth, interoperability issues would need to be addressed to avoid fragmentation risk. 


"This note draws on IMF (2019a), which was prepared in the context of the Bali Fintech Agenda. 
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Introduction 


Major transformations in payments and settlements 
have occurred in generations. The first generation was 
paper-based. Delivery times for payment instruments 
took several days domestically and weeks internation- 
ally. The second generation involved computerization 
with batch processing. Links between payment systems 
were made through manual or file-based interfaces. 
The changeover period between technologies was long. 
Some paper-based instruments like checks and cash 
remain in use. The third generation, which has been 
emerging, involves electronic and mobile payment 
programs that enable integrated, immediate, and 
end-to-end payment and settlement transfers. For 
example, real-time gross settlement (RTGS) systems 
have been available in almost all countries. Distrib- 
uted ledger technology (DLT) has been viewed as a 
potential platform for the next generation of payment 
systems, enhancing the integration and the reconcilia- 
tion of settlement accounts and their ledgers. This is in 
addition to other technological developments (Box 1). 

Research in using DLT for payments and settle- 
ments has provided insights on their potential benefits, 
risks, limitations, and implementation challenges. 
Large-value interbank payment projects have been 
completed in Brazil, Canada, the Euro Area/Japan, 
Singapore, South Africa, and Thailand. Securities 
settlement projects have been investigated in Australia, 
Canada, the Euro Area/Japan, Germany, Singapore, 
and the United States. Central banks and the pri- 
vate sector have also analyzed the improvement of 
cross-border payments through DLT. 

This note takes stock of DLT experiments and 
research in payments and settlement systems.! DLT 
and its protocols are described, and the experiments 
and research projects are summarized. Emerging risk 
management issues, implications for international stan- 
dards, and potential implications for the international 
monetary system are discussed. The note aims to pro- 


Annex I includes a list of the experiments and research projects. 
The stock-taking exercise is based on the availability of public 
information. Retail payment applications are not in the scope 
of this note. 





vide a balanced view with considerations for practical 


implementation and probable long-term applications 
and benefits for payment system developments. 


Distributed Ledger Technology 


DLT enables entities to carry out transactions in 
payment and settlement systems without necessarily 
relying on a central authority to maintain a single 
ledger.? DLT networks could be open or closed (per- 
missioned) depending on their participation policies. 
Various DLT protocols have been used so far in exper- 
iments in payments and securities settlement arrange- 
ments.? A validation protocol defines how transactions 
are validated and included in the overall transaction 
history. The main objectives of the transaction history 
are to prevent double spending and reconcile the 
distributed parts of the ledger. Decentralized infor- 
mation could easily be copied and reused without a 
double-spending-prevention mechanism. 

The main differences between DLT protocols are in 
the construction of the consensus mechanism.‘ That is, 
how validation is done and by what kind of validators 
(for example, institutions, private or public entity, indi- 
viduals, and so on). When there is more than one val- 
idating participant, these need to reach consensus on 
the transaction history. Another key difference is in the 
transparency of the transaction history, which affects 
the possibility for auditing the transaction history. 

Early DLT setups were token-based and specialized 
for maintaining accounts of funds, but later gen- 
erations enabled smart contract solutions and new 
applications.? The latter can be used for maintaining 
different kinds of distributed registers in addition to 


2See CPMI (2017). DLT refers to the processes and related 
technologies that enable nodes in a network (or arrangement) to 
securely propose, validate, and record state changes (or updates) to a 
synchronized ledger that is distributed across the network’s nodes. 

3Annex II includes a list of DLT protocols. 

4See CPMI (2017) for a description of cryptographic tools and 
consensus mechanisms that determine how a ledger distributed 
across multiple nodes could have varying roles and permissions. 

Smart contract is a computer protocol that allows the program- 
ming of logic or conditionality into an asset or transaction, usually 
associated with DLT applications. 
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Box 1. The Evolving Payments System Landscape 


The key factors driving the evolution of the pay- 
ments system landscape have included: 

e Rapidly rising information technology processing 
power and storage capacity at low investment cost 
(for example, through cloud computing) and capac- 
ity to process big data sets, and real-time access to 
all systems and applications on a 24/7/365 basis, 
with immediate transaction-based processing. Sig- 
nificant advances in artificial intelligence underpin 
these developments. 

e Greatly increased communication capacity and con- 
nectivity at very low costs directly point-to-point 
within networks. 

e Low-cost user-interface hardware and software 
platforms (for example, mobile phones, personal 
computers, tablets, and so on) for secure interfaces 
and for connecting to automated devices. 


accounts. For example, securities can be viewed as 
asset accounts of tokens or a register of smart contracts 
transferring ownership titles to individual shares and 
bonds. All proof-of-concept tests from central bank-led 
initiatives indicate that only permissioned DLT net- 
works are suitable for financial market infrastructures 
(FMIs), considering compliance and other regulatory 
requirements (access, know your customer, and so on). 
These protocols have different features. Additionally, 
ongoing projects are seeking continuous improvement 
protocols while additional research remains to establish 
a stable and sustainable protocol. 


Experiments and Research 


Many central banks have oversight and operational 
responsibilities in payment and settlement systems 
and have taken a keen interest in DLT experiments, 
which provide an opportunity to test prototypes while 
analyzing their potential safety and efficiency implica- 
tions with public interest in mind. Likewise, industry 
groups and participants have also used experimen- 
tations to explore market opportunities and address 
shortcomings in the current payments and settlement 
systems landscape. 


2 International Monetary Fund | June 2020 


e Advances in application programming interfaces 
between different system components across service 
providers resulting in modular structures of large 
systems. 

e Enhanced common processing platforms, operative 
systems, open source, freeware and shareware, free 
libraries of apps, and widely used complex financial 
software applications or external software services 
that will facilitate the rapid development of new 
payment features within all kind of systems. 

e Widespread use of encryption, digital identity, and 
e-signature services for safeguarding data and funds, 
recognizing business partners remotely and verifying 
transactions transferred over common and open 
telecommunication connections. 


Large-value Payment Systems 


Prototypes confirmed the feasibility of using DLT 
as a transaction booking method. The proof-of-work 
design and the completely transparent transaction 
database used in Bitcoin-type protocol were deemed 
unsuitable for large-value payments because of process- 
ing capacity needs and lack of privacy. All prototypes 
were based on DLT consensus protocols using less 
processing resources and providing more privacy. This 
required more trust in the validator nodes, which is 
not a problem in a system maintained by the central 
bank or other trusted authorities. 

Prototypes, however, have insufficiently focused 
on the necessary criteria for operational production, 
including throughput,° reliability, and resiliency. 
Therefore, they could not be viewed as sufficient proof 
for production feasibility. Almost all prototypes were 
stand-alone type built as an add-on payment process- 
ing layer upon or in parallel with the existing LVPS. 
Real-time interfaces with central banks’ or financial 
institutions’ internal payment systems were not tested 
except for one prototype (in Singapore), which had a 
direct operation link with the current RTGS system. 


Throughput refers to intraday deadlines by which banks need 
to send a proportion of the value of their days payments to a 
payment system. 
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Privacy and liquidity savings appeared to be high 
priority issues for central banks. All prototypes used 
token-based central bank money, basically deposit 
receipts of the central bank. The employed system 
structures were based on structures supported by the 
selected external DLT software and protocol provid- 
ers. All prototypes were block-chained with several 
transactions in a block. The setups were comparable to 
current RTGS systems and fulfilled settlement finality 
requirements and credit risk limitations. Regarding 
liquidity risks, the prototypes were dependent on the 
prefunded liquidity imported to the system. 

Most of the experiments did not contain 
cost-benefit analyses. The European Central Bank and 
Bank of Japan reported that DLT-based systems have 
higher levels of reliability and resiliency compared 
with traditional RTGS systems, but without making 
any cost-benefit comparisons. The reports contained 
the general benefits mentioned in DLT marketing 
literature, like peer-to-peer communication, secured 
cryptography, smart contracts, immutability, and 
real-time settlement. However, these features can also 
be implemented in traditional payment systems. For 
example, a traditional system could also contain paral- 
lel transaction databases with parallel account balances 
secured by public key infrastructure (PKI) encryption 
and several validators. 

Research and testing could consider the following: 
e Implementing DLT-type solutions for reconciling 

and securing central bank and RTGS participants’ 

payment transfers by using PKI-encrypted transac- 
tions and automated transaction-level reconciliation. 
e A liquidity saving mechanism (LSM) based on split- 
ting DLT payment transactions to allow for several 
partial settlements using readily available tokens 

in the correct priority order, which is not true for 

the liquidity saving models used in current RTGS 

systems. The available liquidity would be used as 
efficiently as possible, when even small amounts of 
tokens would be circulated across the network. 

e Analysis of policy and operational changes 

needed for 24/7/365 operations with no need for 

end-of-day processing. 

e Interoperability across different DLT 
implementations. 
e The benefits and risks of using a universal dig- 

ital asset, or basket of assets, to settle payments 

across borders. 

e Cost and benefit analysis of different kinds of DLT 


implementations. 


Securities Settlement Systems 
DLT prototypes also showed that DLT could be 


viable for post-trade securities processing. All projects 
concluded that securities settlement is a highly suitable 
and feasible environment for DLT-based solutions. 
One of the projects (in Australia) even aimed for 
production implementation in 2021. Some prototypes 
focused on delivery-versus-payment (DvP) implemen- 
tation within securities settlement systems,’ and those 
concluded that DvP with finality is achievable within 
DLT-based systems.® 

The experiments showed that different DvP mod- 
els can be implemented in DLI-based systems. DLT 
solutions can vary considerably in features and tools, 
with which a more efficient processing and account 
method can be designed and customized for improved 
efficiency and security in specific markets according to 
market needs. However, interoperability requirements 
will also be important in the future, which will require 
common elements and standards across settlement 
systems and across markets. 

There was no conclusive analysis on which DvP 
transaction dialogues of the many alternatives (or 
combinations) would be most suitable in a produc- 
tion environment. The securities market has a history 
of large multilateral systems like exchanges, central 
securities depositories (CSD), settlement banks, and 
central counterparties (CCP) utilized by all parties. In 
all prototypes, the central bank was given the role of 
cash instrument provider and could thereby also be the 
one ensuring DvP requirements. One option that was 
tested in some of the prototypes is to create a specific 
DvP dialogue and blocking method for assets, which 
the consensus node(s) can use to ensure the DvP 
requirements before adding the transactions to the led- 
ger of validated transactions. Other options included 
employing specialized DvP controlling nodes and split- 
ting transactions to a chain of incremental sub-DvP 
transactions to reduce the principal settlement risk to 
that of the subtransaction size. 

A project assumption appeared to be that securi- 
ties clearing and settlement systems operate within a 


7DvP refers to a link between a securities transfer system and a 
funds transfer system that ensures that delivery occurs if and only if 
payment occurs. 

8None of the projects published any detailed cost-benefit-analysis 
of a DLT implementation scenario, although it is expected that 
within the ASX project such analysis has probably been made for the 
strategic decision to become the first DLT production environment 
within securities settlement systems. 
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market structure close to the current structure—that 

is, exchanges, dealers, CCPs, CSDs, custodians, and 

central banks operate in similar or near-similar roles 
as they do today and in a multilayered registration 
structure. None of the projects analyzed flatter market 
structures and DvP processing at the end-investor 
level or other radical structural changes in the market 
and associated risks. Furthermore, counterparty risks 
were not analyzed because the counterparties and the 
market structures were assumed to be identical to the 
current structures. Liquidity and credit risks were also 
not analyzed in depth and especially not for changing 
market structures. 

Research and testing could consider the following; 

e The impact of true, real-time 24/7/365 processing 
on system design and convention changes. 

e Structural changes, especially toward flatter markets 
and processing conventions, that would be necessary 
to maximize DLI and the most efficient implemen- 
tation path for such changes. 

e Cost-benefit analysis of operational cost savings, 
security, and stability. 


Cross-Border Payments 


Central banks currently provide settlement services 
only for domestic participants. As a result, private 
banks developed correspondent banking services, in 
which cross-border settlements are executed through 
private banks’ nostro accounts.? Some large interna- 
tional banks have established subsidiaries in major 
markets to support their correspondent network and 
get access to national central bank and private systems. 
This situation may not change with DLT implementa- 
tions, if the presumably permissioned DLT networks 
provided by central banks still restrict cross-border 
participation. A key challenge in facilitating efficient 
interbank cross-border settlement of large-value pay- 
ments, from a technical perspective, is the lack of a 
common settlement platform and network providing 
global reach. 

Central banks have explored DLI and the applica- 
bility for large-value cross-border payments: 

e The Bank of Canada (BOC) and Monetary Author- 
ity of Singapore (MAS) linked their experimental 
domestic payment networks to enable cross-border 


“In correspondent banking, nostro accounts refer to accounts 
held by a customer bank on the books of another bank acting as a 
service provider. 
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and cross-currency payments using central bank 
digital currency (CBDC).!° The experiment con- 
nected two different DLT platforms that facilitated 
payment-versus-payment (PvP) settlement with- 
out the need for a trusted third party acting as an 
intermediary.!! 

e The BOC, MAS, and Bank of England (BOE), 
in an earlier study, explored alternative models for 
addressing shortcomings in cross-border payments.!? 
This included enhancing domestic interbank pay- 
ment systems with current or traditional technology 
to using wholesale CBDC. While the new technol- 
ogy platforms were found to address some short- 
comings, a more fundamental paradigm shift and 
holistic view was identified. 

e Central banks believe that design considerations for 
wholesale digital tokens would require clarity on 
the nature of the claims underlying assets or funds, 
the legal underpinnings, and institutional and risk 


management. 1’ 


The banking industry has also explored the appli- 
cability of DLT for foreign exchange, messaging, and 
large-value payments. 

e CLSNet was launched by CLS Bank International in 
2018 as a DLT-based service.!4 It is not a payment 
service but a bilateral netting service for foreign 
exchange trades, particularly for emerging market 
currencies. Associated payments are processed sepa- 
rately using correspondent banking relationships. 

e The Society for Worldwide Interbank Financial 
Telecommunication (SWIFT) initiated the Global 
Payments Innovation (GPI) platform to improve 
speed, security, and transparency in payment pro- 
cessing standards through improved tracking and 
compliance monitoring. Although SWIFT GPI is 
not DLI-based, research is ongoing to allow block- 
chain companies to connect to the GPI platform, 
which will enable GPI payments to be initiated 


10See BOC and MAS (2019). 

11PyP is a mechanism in a foreign exchange settlement system that 
ensures that a final transfer of one currency occurs if and only if a 
final transfer of the other currency or currencies takes place. 

12See BOC, BOE, and MAS (2018). 

13See CPMI (2019). 

M4CLSNet is a platform operated by CLS Bank International 
(established in 2002), which is a US-regulated financial institution 
that provides foreign exchange netting and settlement services 
through the operation of a PvP settlement service that mitigates 
settlement risk for foreign exchange transactions. 


DISTRIBUTED LEDGER TECHNOLOGY EXPERIMENTS IN PAYMENTS AND SETTLEMENTS 


within blockchain networks and connected to the 
banking system. 

e JPM Coin was designed as a digital representation 
of a fiat currency to make instantaneous payments 
between J.P. Morgan's institutional clients. JPM 
Coin is still under development. 

e Utility Settlement Coin (USC), managed by Fnality 
International, was designed as a digital cash set- 
tlement asset backed by a fiat currency held at the 
central bank and used in wholesale markets.15 USC 
is still under development. 


International banks could probably continue to 
explore the possibility of establishing cross-border 
payment facilities through new innovations and 
collaboration.!° This can have far-reaching effects, 
including on current domestic RTGS volumes because 
a cross-border settlement engine can also process 
domestic transactions. Global banks could benefit from 
moving domestic transactions to a global cross-border 
system because liquidity pooling would be more 
efficient. Benefits could increase, if the reconciling and 
automated interfaces in the new private cross-border 
system are more efficient and it has longer operational 
hours than RTGS systems. 

A common and coordinated strategy could help 
facilitate large-value cross-border payments.!7 This 
could involve the financial sector, central banks, 
and other authorities. This should aim to rapidly 
achieve the benefits of advanced payment technol- 
ogy and DLT without facing the risks and costs 
related to uncoordinated developments. Large-value 
cross-border payments is an area in which intro- 
duction of a new global, open, and low-risk settle- 
ment solution can significantly reduce both technical 
and financial risks. 


Risk Management Issues 


New advanced technologies could also lead to evolv- 
ing risks. Liquidity, credit, transaction delay, settlement 


'5Fnality International (Fnality) is a consortium of 15 major 
institutions that envisioned the creation of a tokenized settlement 
asset that has finality, multicurrency (US dollar, British pound, euro, 
Canadian dollar, and Japanese yen), and interoperability features. 

16The global interbank large-value community is rather limited, 
with only some major banks in each country, many of which are 
subsidiaries of international banks operating in several countries. 

'7As of December 2019, the Financial Stability Board's work 
program for 2020 has included the development of a road map to 
enhance cross-border payment systems. 


finality, counterparty, and operational risks could all 
change in varying degrees in a new environment, par- 
ticularly because of the global interconnections within 
the financial markets. Like other industries, FMIs 
could increase their global reach.!® Payment and settle- 
ment systems could increasingly become multicurrency 
platforms and able to handle in parallel different kinds 
of currencies and other types of funds. The securities 
trading market could experience the largest change 
because of changing short selling/buying conventions. 


Liquidity Risks 


The movement to real-time immediate settlement 
could increase liquidity needs.!? However, this does 
not necessarily mean a need for liquidity that is 
higher than currently available, which, during normal 
days, can be forecasted based on historic transaction 
patterns by using simulation models built for payment 
and settlement systems.” Compared to the current 
environment,?! the following issues could imply 
major changes. 

e Real-time availability, Immediate real-time process- 
ing implies continuous 24/7/365 flow of liquidity 
without end-of-day breaks. 

e Liquidity needs. Central banks would need to update 
their liquidity provision policies to function globally 
without day breaks and with automated solutions 
to ensure globally sufficient liquidity supply to pay- 
ment and settlement system participants. Moving to 
immediate settlement of securities trading transac- 
tions could affect both the trading conventions and 
liquidity needs.?? 

e Flatter structures. The flatter, non-tiered, structure 
of DLT systems indicates that each payment and 
settlement system participant could oversee its own 
liquidity requirements, which makes the overall sys- 


18Some FMIs already provide cross-border services, including CLS 
Bank International, Euroclear Bank, Clearstream Banking Luxem- 
bourg, TARGET2, LCH, and others. 

The upper bound of liquidity refers to the amount of liquidity 
that must be available to participants for immediate settlement 
throughout the day. Any additional liquidity above the upper bound 
remains idle on participants’ settlement accounts for the whole day. 
See Leinonen and Soramáki (1999). 

20The Bank of Finland’s simulation model is used frequently. For 
details, see https://www.suomenpankki.fi/en/financial-stability/bof 
-pss2-simulator/. 

2! Traditional deferred net settlement systems have mostly operated 
batch-based using end-of-day settlement or faster delivery mecha- 
nisms with separate settlement periods. 

22Most securities settlement systems operate on T+2 or T+3 basis. 
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tem less dependent on individual and large clearing 
bank participants. 

e Global connections require payment and settlement 
systems to become interoperable. Global DLT-based 
systems could reduce liquidity needs. That is, 
available liquidity could be pooled into one com- 
mon fund to be used for all payment and settlement 
streams instead of a stream of specific pools. 


Credit Risks 


The traditional approach to managing credit risk 
appears to conflict with the nature of DLT. Credit risks 
and liquidity needs could be viewed as two sides of the 
same coin in payment and settlement systems. If a 
transaction has been booked on both the receiving and 
sending ends, then it has been settled either by using 
liquidity (that is, settlement funds) or by accepting 
credit risks of delayed interbank settlement. Credit 
risks could grow in a global and flat infrastructure 
because some banks could bilaterally have a sending 
surplus while others have a receiving surplus. To net 
such imbalances, the market would need to have a 
continuously operating intermediary, which could 
require collateral to avoid credit risks. However, this 
would conflict with the nature of bilateral settlement 
in DLE based systems. 

A more efficient solution within a real-time 
environment would be that settlements are only 
liquidity-based, and each participant ensures that 
sufficient liquidity is available. This could be based 
on central bank money but could also result in the 
growth of automated short-term liquidity markets 
(hourly or even shorter) between market participants, 
which could price short-term liquidity according to 
credit risks and other costs. Moving to a completely 
liquidity-based settlement would result in decreasing 
credit risks in payment and settlement systems. 


Delayed Transactions 
In RTGS systems, different kinds of LSMs are used 


and involve transaction queuing that implies some 
transaction delays. Queued transactions are settled 
based on different kinds of partial or complete netting 
algorithms.2% In a pure bilateral real-time system, the 


23See Leinonen and Soramáki (1999). 
24See Leinonen and Soramäki (1999). 
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sender can delay payments or settlements only by 
queuing transactions internally. 

If LSMs are introduced in real-time DLT-based 
systems, it could require a separate centralized layer 
for queued payments and liquidity holdings for net 
settlements. This would be possible, but it could be 
difficult to get acceptance for random types of pay- 
ment delays depending on service providers’ queuing 
needs. For example, an immediate payment transfer 
negotiated between two customers could jeopardize 
the business agreement between these customers if the 
paying bank would start to delay the corresponding 
payment. In an immediate securities settlement, the 
buyer expects to receive the securities immediately 
and the seller the corresponding funds. The efficiency 
and usability of a netting-based liquidity mecha- 
nism could depend on the possibility of queueing 
low-priority payments. 


Settlement Finality 


In a DLT-based system, transactions are updated 
immediately on all relevant accounts, while correc- 
tions are usually made with a new transaction. The 
overall transaction ledger is additive.?é Settlement 
finality can be clearly defined as occurred when a 
specific transaction is booked on both the correct 
sending and receiving account within a few seconds. 
In a real-time end-to-end system, there is no settle- 
ment window, which could generate a Herstatt-type of 
settlement risk.27 All successfully booked transactions 


are final. Old accepted blocks and transactions cannot 
be changed.?8 


Counterparty Risks 


DLT implementation could result in global and flat 
systems. The number of counterparties in payment 


25A contrary view is that DLT transactions could be technically 
validated if one of more nodes are inactive. 

26In permissionless DLT arrangements that rely on consensus 
processes, the ability of participants to revise ledger transactions 
gives rise to probabilistic settlement because there may never be a 
settlement finality. 

27See Galati (2002). Herstatt risk is also referred to as foreign 
exchange settlement risk, cross-currency settlement risk, or principal 
risk (CPSS 1996). It is the risk that one party to a foreign exchange 
transaction will pay the currency it sold but not receive the cur- 
rency it bought. 

?8For permissioned DLT, however, most node validators or a 
specific node with higher rights could fork the chain from a previous 
block, reversing the transaction. 
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and settlement systems could grow, and the share of 
cross-border transactions could increase. To reduce 
counterparty risks within large global payment and 
settlement systems, the liabilities and requirements on 
individual counterparties must be clear-cut and similar 
across the whole network of participants. By enforc- 
ing settlement in central bank money (or comparable 
low-risk settlement assets), counterparty risks can be 
reduced. However, there must also be strict rules on 
payment initiation and the handling of fraudulent 
and otherwise criminal transactions because there are 
always risks for different kinds of criminal activities 
within fund transfers. 


Operational Risks 


In DLE based environments, operational and cyber 
risk incidents could rapidly affect many transactions. 
This is not different from old computerized processing, 
but the real-time booking environment could require 
very fast and highly automated error-handling pro- 
cesses to limit the volume of transactions affected by 
operational errors. This calls for improved monitoring 
systems and error-correction solutions. Furthermore, in 
Bitcoin-type DLT applications, there is no possibility 
to recreate lost funds. Each node in the network must 
technically safeguard its own funds.?? Within LVPSs 
and securities settlement systems, the funds at stake are 
so large that it could be important to recreate funds 
of lost nodes, especially in case of major operational 
risks. For example, large-scale cyberattacks could 
compromise data confidentiality, service availability, 
and systems integrity. This could also affect established 
settlement finality rules and recovery time objectives, 
which require the resumption of operations within two 
hours after disruptive events. 


Stability and Bank-Run Risk 


DLT based systems could operate in real-time, 
which could accelerate bank runs. Critical banks could 
lose their available liquidity rapidly. If payment and 
settlement systems operate on credit, the credit limits 
of such banks could be rapidly consumed. By using 
artificial intelligence solutions, which are monitoring 
payment and settlement flows in real time, bank-run 


29From a technical standpoint, nodes contain a log or ledger that 
is common across all nodes of a DLT system instead of actual funds. 


situations could be detected and then stopped in 
early phases. 


Changing (Naked) Short Selling and Buying Conventions 


DLT could potentially create an environment with- 
out short selling and buying risks. DLT developments 
could result in custodian accounts being kept in a 
flat, real-time ledger. Trades could be settled immedi- 
ately and automatically, directly on investor or trader 
accounts. In this environment, naked short selling 
would not be possible. The seller must ensure that the 
assets to be traded are available (or at least have been 
lent from another source). The buyer needs to have 
the necessary funds. This could have a major impact 
on current trading practices. For example, current 
high-frequency trading strategies are based on sending 
and canceling many orders, but in a true real-time 
environment, this would not be possible because orders 
would be immediately settled with finality when traded 
and cannot be canceled. However, after each trade 
and settlement, the assets can immediately be retraded 
according to investors’ desires. 

e For Delivery-versus-Delivery (DvD) transac- 
tions, the trading partners must ensure that the 
corresponding assets are available for immediate 
settlement.? The buyer could provide securi- 
tized monetary assets like central bank certifi- 
cates as payment. 

e For DvP transactions, the investors or traders have 
to ensure that they have funds for the cash legs in 
their bank accounts, but this does not necessarily 
ensure that their clearing participant (generally their 
bank) would have sufficient settlement funds (for 
example, central bank money) for all buy trades 
of all their customers and investors during peak 
buy periods. The clearing participants need—in 
a real-time securities settlement environment—to 
improve their liquidity forecasts and enlarge their 
liquidity reserves if they have trading customers with 
highly fluctuating liquidity needs. 


Financial Market Infrastructure Standards 


The Committee on Payment and Settlement Sys- 
tems/International Organization of Securities Com- 


30DyD refers to a link between two securities transfer (settlement) 
systems that ensures that a delivery occurs if and only if another 
delivery occurs and vice versa. 
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missions (IOSCO) Principles for Financial Market 
Infrastructures (PFMI) serves as the international stan- 
dard for assessing efficiency and risks in payment and 
settlement systems. Given potential DLT adoption by 
such infrastructures or other emerging business models 
in the long term, the principles could be applicable as 
they are technology neutral. DLT developments and 
discussions with authorities and market participants 
have started to be included as part of FMI assessments 
in IMF-World Bank financial sector assessment pro- 
grams (Australia, Canada, Singapore, Switzerland).?! 

Early experiments and initial observations suggest 
that new interpretations could be necessary, particu- 
larly with bilateral settlements.?2 DLT-based solutions 
could be designed as bilateral settlement transfers using 
a dialogue protocol without any centralized or other 
clearly observable physical infrastructure. Clarity on 
the DLT-type of structures covered (or not covered) by 
the PFMI could be helpful. Furthermore, DLT-based 
systems could feature different risk liability programs 
because the organizational setup could differ from cur- 
rent centralized settlement systems. In a DLT-system 
using token-based settlement assets, the FMI has no 
settlement accounts in its balance sheets. Transactions 
are booked in one ledger and distributed across the 
network where credit risk, liquidity risks, legal risk, 
and operational risks must be managed. Possible cen- 
tralized operational services like certification authorities 
and transaction validation could be technical services 
that are separate legal entities, which are not con- 
sidered FMIs. 

The CPMI analytical framework for DLT-based pay- 
ment, clearing, and settlement arrangements provides 
a basis to examine efficiency and safety implications.>* 
This mainly assists central banks and other authori- 
ties relative to their oversight, operational, or catalyst 
responsibilities, but the framework is equally useful for 
market participants that are considering new service 
offerings that could be subject to regulation, supervi- 
sion, and oversight.>> 


31See IMF (2019b, 2019c, 2019d, 2020). 

32DLT might be implemented in traditional centralized systems 
with multilateral net settlements, but this is a special case, in which 
PFMI requirements would be applied similarly as for any multilat- 
eral payment and settlement system. 

33The PFMI, footnote 5, notes that the definition of FMIs 
excludes bilateral relationships between financial institutions and 
their customers, such as traditional correspondent banking. 

34See CPMI (2017). 

35For illustration, distributed Financial Market Infrastructures 
have recently been coined as a new service offering by some market 
participants. 
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Potential Impact on the International 
Monetary System 


The international monetary system, which has 
largely operated on universal financial messaging 
standards, could face challenges arising from DLT. 

For example, many systemically important FMIs, 

their participants, and correspondent banks rely on 
SWIFT’s core financial messaging services. More than 
200 market infrastructures use SWIFT and about 
11,000 institutions across 200 countries and territories 
are connected to SWIFT.°° SWIFT messaging services 
support domestic and international payments and facil- 
itate the settlement of payments and securities transac- 
tions, including in central banks’ monetary operations. 

Interoperability issues would need to be addressed 
to avoid fragmentation risk. Fragmentation could arise 
at two levels, including: (i) interoperability of DLT 
systems with legacy infrastructures, and (ii) interopera- 
bility between distributed ledgers across multiple coun- 
terparties.*” In this context, the PFMI recommends 
the use of relevant internationally accepted communi- 
cation procedures and standards to facilitate efficient 
payment, clearing, and settlement. Such considerations 
are particularly relevant for cross-border financial 
communications, which help identify counterparties 
and securities numbering processes. Where interna- 
tional procedures and standards are not adopted (such 
as standards set by the International Organization 
for Standardization), interoperability features should 
be developed to support translation or conversion 
between FMIs located across different jurisdictions. 


Conclusion 


The evolution of payment and settlement systems 
has reached another major crossroad with the emer- 
gence of DLT, but many important questions remain: 
e When would such new technologies be mature 

enough to move from controlled experiments to 


implementation? 


Could the public policy objectives of safety and 
efficiency be fully observed with the replacement 

of legacy infrastructures with DLT-based systems or 
the introduction of innovative service offerings from 
new entrants in the market? 

e What new interpretations may be needed under 


existing international standards? 


36See IMF (2018). 
37See SWIFT (2016). 
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e What are the implications for regulation, supervi- 
sion, and oversight in a world that is moving toward 
greater real-time settlement, flatter structures, con- 
tinuous operations, and global reach? 


Until we begin to answer these questions and consider 
the adoption of RTGS systems in most countries around 
the world, which has helped mitigate systemic risks and 
safeguard financial stability, it is not clear that DLT will 
gain broad traction as a basis for LVPS. 
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Annex I. List of DLT Experiments and Research 
in Payments and Settlements 


Large-value Payment Systems 


Project Jasper (Phase 1) (Canada) 

Project Jasper (Phase 2) (Canada) 

Project Khokha (South Africa) 

Project Stella (Phase 1) (Euro Area/Japan) 
Project Ubin (Phase 1) (Singapore) 
Project Ubin (Phase 2) (Singapore) 
Project Inthanon (Phase 1) (Thailand) 
Project Salt (Brazil) 


Securities Settlement Systems 


Project Blockbaster (Germany) 

Project by Depository Trust and Clearing Corpora- 
tion (United States) 

Project ASX replacement of CHESS (Australia) 
Project Jasper (Phase 3) (Canada) 

Project Stella (Phase 2) (Euro Area/Japan) 

Project Ubin (Phase 3) (Singapore) 

Project Inthanon (Phase 2) (Thailand) 


Cross-Border Payment Arrangements 


10 


CLSNet foreign exchange netting service 
(United States) 

SWIFT DLT research (Belgium) 

Utility Settlement Coin (Switzerland) 

JPM Coin (United States) 

Project Jasper (Phase 4)—Project Ubin (Phase 4) 
(Canada, Singapore) 

Cross-border interbank settlements (Canada, United 
Kingdom, Singapore) 

Project Stella (Phase 3) (Euro Area/Japan) 
Project Inthanon (Phase 3)—LionRock (Thai- 
land, Hong Kong) 
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Annex Il. Distributed Ledger 
Technology Protocols 


e Bitcoin DLT protocol was defined in 2008 (Naka- 


network membership service. Privacy is ensured 
toward other nodes, but the membership service will 
know the identity of all other nodes. 


moto 2008). It was the first token-based DLT e Quorum is an Ethereum-based enterprise-focused 


protocol. It is based on a so-called “proof-of-work” 
protocol used by “miners.” Anonymous or pseudon- 
ymous miners compete to solve an encryption task 
for adding a new block to the public block-chained 
transaction database. Double spending is controlled 
by accepting only the first instance of the next 
transaction generated by a bitcoin node—that is, 

it considers that all transactions sent by a node are 
sequentially numbered. Because the miners in the 
network are unknown, it is impossible to control 

to what extent they collaborate, which increases the 
risk for so-called 51 percent abuse of mining power 
(Ali and Barrdear 2014). In the Bitcoin protocol, 
the transaction database is public. Because users 
Bitcoin account addresses are pseudonymous, it is 
possible to identify all transactions belonging to a 
person once the pseudonym is revealed, for example, 
in connection with a transfer request. 

Digital Asset Platform is developed by the US 
company Digital Asset (Digital Asset 2016). It con- 
tains the Digital Asset Modeling Language for the 
management of contracts and contract transactions 
using a private contract store and a global sync log. 
Elements is a blockchain platform developed from 
Bitcoin that is provided by the private company 
Blockstream. It supports transaction confidentiality 
and PvP- and DvP-type cross-ledger transfers. 
Ethereum is an open-source DLT protocol for smart 
contracts, which is today maintained by the non- 
profit organization Enterprise Ethereum Alliance. 
Hyperledger Fabric is an open-source protocol 
from Linux Foundation’s Hyperledger Initiative that 
is based on smart contracts. Validation nodes vali- 
date transactions. The validating nodes are assigned 
validation tasks, and the other validating nodes 

can audit the results of other validating nodes. The 
validation process is thereby efficient, but users need 
to trust the validator nodes. All nodes, user and 
validation nodes, need to be recognized by a DLT 


DLT environment for smart co,ntracts with 
improvements in the following areas: “network and 
peer permissions management, enhanced transac- 
tion and contract privacy, voting-based consensus 
mechanisms, and better performance,” as reported 
by the Blockchain Council. J.P. Morgan facilitated 
the creation of Quorum. 

R3/Corda is an open-source protocol developed 
especially for the financial industry by the R3 
consortium established by major international 
financial institutions (Brown 2018; Hearn 2016). 
It can run both transaction accounts and smart 
contracts. Unlike other DLT solutions, it has only 
bilateral transaction histories and therefore no 
common transaction database. Transactions are 
validated by the sending and receiving nodes and 
specialized notary nodes. The task of the notary 
node is to hinder double spending. Validation is a 
rapid process. Participants need to trust the notary 
node(s). The notary node will see all transactions 
and its processing speed and accuracy will affect the 
network. Any security problems within the notary 
node can jeopardize the whole network. Because of 
its structure, it will require different kinds of backup 
solutions for sufficient resiliency compared with 
other DLT networks. 

Sequence is protocol provided by Chain (a private 
US company) for managing account balances based 
on tokens in a ledger-as-a-service environment. 
Zilliqa is a DLT protocol employed by the Anquan 
Capital (public company in Singapore) blockchain 
platform, and it is closely related to the Elastico 
DLT protocol. Both use “sharding” to share mining 
activities among subgroups of miners, which facil- 
itate parallel processing. This feature increases the 
scalability of this protocol considerably to be close 


to linear with increased volumes. 
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